If what your patch fixes is a vulnerability bug then the test for it is basically an exploit.

isn't there a pretty big gap between a segfault and an rce? I thought that was the entire point -- that mythos closed the gap